diff --git a/.changeset/desktop-api-open-in-browser.md b/.changeset/desktop-api-open-in-browser.md
new file mode 100644
index 0000000000000..082eff659f6e3
--- /dev/null
+++ b/.changeset/desktop-api-open-in-browser.md
@@ -0,0 +1,5 @@
+---
+'@rocket.chat/desktop-api': minor
+---
+
+Add optional `openInBrowser(url)` method to `IRocketChatDesktop`. Desktop clients can expose this to let the server frontend request that a URL be opened in the user's native browser instead of inside the Electron webview — used by flows that must leave the app, such as phishing-resistant MFA redirects to external identity providers.
diff --git a/packages/desktop-api/src/index.ts b/packages/desktop-api/src/index.ts
index 9d10c1f89d1c5..c745a041d7c8a 100644
--- a/packages/desktop-api/src/index.ts
+++ b/packages/desktop-api/src/index.ts
@@ -62,5 +62,6 @@ export interface IRocketChatDesktop {
 	clearOutlookCredentials: () => void;
 	setUserToken: (token: string, userId: string) => void;
 	openDocumentViewer: (url: string, format: string, options: any) => void;
+	openInBrowser?: (url: string) => void;
 	reloadServer: () => void;
 }